PT-2015-2602 · Freedesktop.Org+3 · Policykit+3

Colin Walters · Published 2015-07-02 · Updated 2018-10-30 · CVE-2015-4625

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PolicyKit versions prior to 0.113

Description The issue is related to an integer overflow in the authentication agent new cookie function. This allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value. The exploitation of this issue can enable a local attacker to elevate their privileges.

Recommendations For versions prior to 0.113, update to version 0.113 or later to resolve the issue. As a temporary workaround, consider restricting the ability to create a large number of connections to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2015-1588

BDU:2015-11967

CVE-2015-4625

MGASA-2015-0262

OPENSUSE-SU-2015_1734-1

OPENSUSE-SU-2024:10436-1

SUSE-SU-2015:1838-1

USN-3717-1

Affected Products

Alt Linux

Policykit

Suse

Ubuntu

References · 66

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4625 · Security Note
• https://bdu.fstec.ru/vul/2015-06855 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3218 · Security Note
• https://advisories.mageia.org/MGASA-2015-0262.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-4625 · Security Note
• https://ubuntu.com/security/CVE-2015-4625 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11975 · Security Note
• https://bdu.fstec.ru/vul/2015-06856 · Security Note
• https://ubuntu.com/security/CVE-2015-3218 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1838-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3256 · Security Note
• https://ubuntu.com/security/CVE-2015-3255 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html · Vendor Advisory